I dont know how the script makes the thumbnail (i asume loading a instance of IE and making a screenshot). But what about security? Sites that do someting that is not cool, like evil javacript/cookies/ etc. Those are then automaticly executed. So when u know who has the script you send 'evil site', and its executed on the receivers pc.
/ –
